Static task
static1
Behavioral task
behavioral1
Sample
5ee2f4ffac3ab0d8fa2786c5ab0604d0_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5ee2f4ffac3ab0d8fa2786c5ab0604d0_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5ee2f4ffac3ab0d8fa2786c5ab0604d0_JaffaCakes118
-
Size
140KB
-
MD5
5ee2f4ffac3ab0d8fa2786c5ab0604d0
-
SHA1
91db4f9c59bdd59ba2c2af9012f55ebc05b4e949
-
SHA256
cc1dc19d495055dbd94c6ba21b18887f9257b0c70319468db49dba5f94a8b2f0
-
SHA512
e965f0ab4e09021e63bd1d464430782c94076707e419ab74de8a2023a9913d0e94920370e1457811650cbef9e6fa703b9f92bcf5ffcef85d4d50821b30adf0cb
-
SSDEEP
3072:aUgJp/gzuOt2UvbbrMbvT0q8O1cZPzQ7IXMBc+AMP+QfQEhxFyVU749CNiK:a9JGuO5jwvP6bQ7yMP+DE827piK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5ee2f4ffac3ab0d8fa2786c5ab0604d0_JaffaCakes118
Files
-
5ee2f4ffac3ab0d8fa2786c5ab0604d0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 31KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gogoloa Size: 99KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE